Username/ Password alarm

[fonejack]

I have two SX-2000L exhibiting the same symptom of a major alarm security failure: Default Usernames or Passwords in Use. I have changed all four Usernames and passwords several times but the major alarm still exists. Of note is this first occurred after doing the last software upgrade to 34.2.7.4 through OPSman. Any ideas?

 

[nytalkin]

you are using at least one of the default usernames or passwords. If you don't want to change them go to Matenance and enter the following command "set threshold security nil nil nil" the alarm will go out

NO GOOD DEED GOES UNPUNISHED!

 

[fonejack]

That's just it I have changed the following default usernames maint1, maint2, system, and installer. I can do a display user and they all show as being changed. The passwords for all four users has been changed away from the default sx2000 but yet the alarm persist. Is there some other username or password I'm missing? Thanks

 

[nytalkin]

You have missed one...."SYSTEM" don't fool with it unless you have a reason to do it.

NO GOOD DEED GOES UNPUNISHED!

 

[fonejack]

My previous post does show me changing “system” but it is lower case is there another “SYSTEM” in upper case which needs to be changed? Thanks

 

[kwbMitel]

I'm only guessing here as it has been years since I touched a 2K but what I remember is that you need 2 different commands to change all users passwords

The System user cna change the lower users passwords using the command:
Reset Password

For the current user (System) you need to use
Change Password

If you want to change the usernames
Reset Username <user>

To view usernames
Display Usernames


*******************************************************
Occam's Razor - All things being equal, the simplest solution is the right one.

 

[kwbMitel]

another thought, is this a redundant system and if so, have you updated the users on both sides?

*******************************************************
Occam's Razor - All things being equal, the simplest solution is the right one.

 

[fonejack]

Ok I figured it out, the latest version of software most consider using the same string as the username and password as being default. I had maint2 setup for the operators to access only the telephone directory so they could maintain it with out my intervention and was using that simple setup. I changed the password for main2 to other than the username and the alarm disappeared. Just to verify I changed it back and the alarm reappeared. Thanks for the help.